PCNSE · Question #275
The firewall determines if a packet is the first packet of a new session or if a packet is part of an existing session using which kind of match?
The correct answer is A. 6-tuple match. On a Palo Alto Networks firewall, a session is defined by two uni-directional flows each uniquely identified by a 6-tuple key: source-address, destination-address, source-port, destination-port, protocol, and security-zone…
Question
The firewall determines if a packet is the first packet of a new session or if a packet is part of an existing session using which kind of match?
Options
- A6-tuple match:
- B5-tuple match:
- C7-tuple match:
- D9-tuple match:
How the community answered
(25 responses)- A92% (23)
- B4% (1)
- C4% (1)
Explanation
On a Palo Alto Networks firewall, a session is defined by two uni-directional flows each uniquely identified by a 6-tuple key: source-address, destination-address, source-port, destination-port, protocol, and security-zone. https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClVECA0
Topics
Community Discussion
No community discussion yet for this question.